soarou
Static task
static1
Behavioral task
behavioral1
Sample
50789b7b0a5c3d44d9051ca9f5e7c679.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
50789b7b0a5c3d44d9051ca9f5e7c679.dll
Resource
win10v2004-20231215-en
General
-
Target
50789b7b0a5c3d44d9051ca9f5e7c679
-
Size
15KB
-
MD5
50789b7b0a5c3d44d9051ca9f5e7c679
-
SHA1
a9aa10bec408312b36f7c0f2ce2072dd21046ec2
-
SHA256
8129f075c4a4c1056b7bf8709252b9e3d26df078a0812050619e9d05f5b56441
-
SHA512
f0351717813325124ee06be916e2070f8ff88943835793cb18378116c104bbd97d99f283e683e5df9e189a609f65699107103008a46e2ac09fa530a9d03e705f
-
SSDEEP
192:ofuMM49ckqZKi+ee4AE43TfTRC20k85+2InaeLMYac1/OgvUKPXeq0AotqgcJ5:hMt4Ki+uAEqb05Inaeg6NvvXeq0F6J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50789b7b0a5c3d44d9051ca9f5e7c679
Files
-
50789b7b0a5c3d44d9051ca9f5e7c679.dll windows:4 windows x86 arch:x86
e219cb7b0705c3bbb1814b1358d0376d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
WaitForInputIdle
PostMessageA
MessageBoxExW
IsMenu
GetParent
DefDlgProcA
DdeCreateDataHandle
DdeCmpStringHandles
CallWindowProcW
wsprintfA
kernel32
lstrlenA
lstrcatA
_lwrite
_lread
_llseek
WriteConsoleA
SystemTimeToTzSpecificLocalTime
AddAtomA
Beep
BeginUpdateResourceA
CloseHandle
CreateFileA
CreateThread
DeleteAtom
DeviceIoControl
ExitProcess
ExitThread
FillConsoleOutputCharacterA
FlushViewOfFile
GetFileSize
GetLastError
GetProcAddress
GetProcessHeap
GetProcessHeaps
GetStdHandle
GetSystemTime
GetTickCount
HeapAlloc
InitAtomTable
LoadLibraryA
LoadLibraryExA
OpenMutexA
RtlMoveMemory
Sleep
SleepEx
gdi32
GetGlyphIndicesA
comdlg32
GetOpenFileNameA
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ